Re: Verify raw data within slaves on 9.9.x

2012-06-14 Thread Mark Pettit
If what you want is the basic functionality of "cat", what's wrong with "named-compilezone -with -some -options"? On Jun 14, 2012, at 11:00 AM, Walter Smith wrote: > So essentially if I'm scripting on a slave and would like to check-into-svn > changes within any particular 'raw' zone - I'll sti

Re: BIND ignores changes in zonefiles

2012-06-14 Thread Mark Pettit
On Jun 14, 2012, at 5:54 AM, Marian Roess wrote: > Thank you for your quick answer. > >> You've possibly checked all this, but let me ask anyway: >> >> 1. Are you monitoring named logs when reload the zones? Any errors? > > Yes, I do. > > zone cs.uni-dortmund.de/IN: loaded serial 11216

Re: Verify raw data within slaves on 9.9.x

2012-06-11 Thread Mark Pettit
We wrote a Perl script to transparently translate a raw zone file into text, so all of our old code that assumes that a zone file is in text format wouldn't die. To convert a raw file to text, we use the following command-line, with the following variables: named-compilezone -i none -k ignore

Re: Checking for zone expiration?

2012-05-21 Thread Mark Pettit
On May 21, 2012, at 2:02 PM, Mike Hoskins wrote: > as usual there is more than one way to skin a cat... another > network-based way that doesn't involve local mtime checks would be > querying the master soa from your monitoring host, and then hitting each > slave on port 8080 (or whatever) via st

Re: journal rollforward failed: journal out of sync with zone

2012-04-12 Thread Mark Pettit
You don't necessarily have to get rid of the cron job to keep journal files. "ixfr-from-differences" is intentionally designed to allow you to arbitrarily replace the zone file and yet continue to keep your .jnl files. However, I too have run into rollforward errors with my use of "ixfr-from-di

Re: re-bind named to all interfaces

2012-04-12 Thread Mark Pettit
It probably has to do with BIND dropping privileges. If you run BIND with "-u" so it changes to an unprivileged user, then BIND may not be able to bind() to new interfaces created on your system. I use FreeBSD, and my solution was to do this every time I add a new interface: RESET=`sysctl -e

Re: AEM Question

2012-04-09 Thread Mark Pettit
The release version of BIND 9.9.0 contains the 9.9 ARM. You can download a copy of it from my web page if you like: On Apr 9, 2012, at 11:01 AM, Manson, John wrote: > Any idea when the ARM for 9.9.0 will be published? > No mention on the ISC web site. > > Reference and FAQ > The primary docume

Re: How to reset the serial number?

2012-03-26 Thread Mark Pettit
Did it reject the zone when you used a too-large serial number? If so then that explains why digging against the master doesn't show an updated serial. On Mar 26, 2012, at 11:53 AM, Carlos Ribas wrote: > Hello, > > I was doing some tests with DNSSEC in that zone. I used one day of > sign

Re: "rndc reconfig" vs. "rndc reload"

2012-03-19 Thread Mark Pettit
new zones without having to subsequently do "rndc reload ". On Mar 16, 2012, at 4:09 AM, Matus UHLAR - fantomas wrote: >> On 3/16/2012 4:10 AM, Mark Pettit wrote: >>> We have an antiquated push process that copies files into the >>> zonefile directory and the

"rndc reconfig" vs. "rndc reload"

2012-03-16 Thread Mark Pettit
I've read carefully through the BIND ARM and am still not sure of the answer to this, so I figured I'd ask on here. "rndc reconfig" causes BIND to re-load its config file, but unlike "rndc reload", BIND will not scan the zone files it's mastering to see if there have been any updates. This is

How to identify a "raw" zone file

2011-12-01 Thread Mark Pettit
efile, as opposed to a "text" format zonefile? I've looked at a few of them, and I noticed that all the ones I've seen start with the four-octet string "00 00 00 02". Is that sufficient? Mark Pettit Yahoo!, Inc. pet...@yahoo-inc.com